Q: encryted log
Steve Grubb
sgrubb at redhat.com
Mon Nov 26 20:30:28 UTC 2018
On Saturday, November 24, 2018 10:37:41 AM EST Ranran wrote:
> Is there a way to encrypt the auditd logs which are saved to disk?
> The system need to save logs from local into disk (not a remote
> connection), but it should be saved encryped. Is there a way to do it
Typically audit logs are protected by virtue of needing root to read
anything. An untrusted root user is something Linux isn't designed for.
-Steve
More information about the Linux-audit
mailing list